$ rpki-client -vvf rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft File: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft (raw, json) Hash identifier: So3htOPL5+o3bvhpVNsgMECZmvzMWy/wJdTdSh3Y/YM= Subject key identifier: 29:73:8C:17:65:A8:23:52:98:5D:93:E0:1C:0A:E9:1D:65:44:A4:EA Authority key identifier: 20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 Certificate issuer: /CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Certificate serial: 3CF4CC3A2E692E20363C705B00D8BCD017A6AFDC Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft Manifest number: 2B Signing time: Tue 02 Jun 2026 23:13:58 +0000 Manifest this update: Tue 02 Jun 2026 23:08:58 +0000 Manifest next update: Thu 04 Jun 2026 02:10:58 +0000 Files and hashes: 1: 3130332e32312e3232392e302f32342d3234203d3e20313331373433.roa (hash: PzDjWUX+MVj+6J7B1iRzlwiphKEYQz+nq2Fc4OsYou4=) 2: 3130332e3232372e3134322e302f32332d3233203d3e20313331373433.roa (hash: w2rrLKwQvnDkFhCZteOExsfVWuGGvpzrSdyrGmIOzEU=) 3: 3130332e3232372e3134332e302f32342d3234203d3e20313331373433.roa (hash: IEg9VS4+40+4nrODwfWuoU7C6J1Nopw04FOkjxxAImU=) 4: 3130332e3232372e3134322e302f32342d3234203d3e20313331373433.roa (hash: 461gL5LYpfd/DVSQ0wQVmEx95n7sDL2Ki0MpmaYWYE8=) 5: 207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl (hash: PfSkreYeFR14pPZh+N3I7HrnD5ey6U1SkOHAEaiPiU4=) 6: 3130332e3232372e3134312e302f32342d3234203d3e20313331373433.roa (hash: HUrUqr6VOIuC0aE2gsmFrDbZuNmsTOPwd47q0S/1QYk=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 03 Jun 2026 10:27:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:f4:cc:3a:2e:69:2e:20:36:3c:70:5b:00:d8:bc:d0:17:a6:af:dc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=207F78495B91DD933A3C60FB6F5F3A01B3AEB244 Validity Not Before: Jun 2 23:08:58 2026 GMT Not After : Jun 4 02:10:58 2026 GMT Subject: CN=29738C1765A82352985D93E01C0AE91D6544A4EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a3:7f:9e:ab:3e:aa:58:7a:54:95:f1:55:51:bd: 0f:87:ff:e0:45:09:21:26:89:c8:42:91:23:44:8d: b4:ec:22:2e:eb:67:36:b5:3a:de:1e:42:78:88:f3: ee:19:52:c1:b5:fa:68:d4:2b:55:b8:f0:40:f1:3e: be:7f:df:30:1f:d0:e7:dc:47:43:2d:09:90:ca:61: 52:99:cf:94:8d:df:cd:d6:35:8a:2b:a0:bd:45:5f: 54:26:e3:27:b3:7e:80:6b:b4:3f:b5:84:ae:53:ae: 59:ce:c0:0b:e2:9f:50:ef:c5:ab:69:21:66:d1:73: 26:9f:c4:b0:d6:d7:29:da:8d:0a:6e:91:44:5a:95: d0:70:ab:fd:93:6b:6a:ac:60:fe:9d:ab:1f:7c:55: 04:f7:05:2a:a9:8f:bd:9a:7e:36:ce:10:74:e0:a2: 68:76:c4:05:13:16:4b:87:bb:28:20:cb:54:e2:71: 37:0c:8c:c1:57:6e:30:2f:eb:cc:ca:d0:a9:36:bd: 7a:52:e9:4c:06:71:15:f9:02:55:c8:48:9e:5f:da: 09:55:d0:5b:7d:ec:aa:83:84:c8:e4:57:0a:5d:c6: 7d:eb:f9:c4:ed:3c:1d:46:33:de:f4:3a:0f:af:63: b7:6f:8f:17:d2:ae:17:16:80:2f:c5:02:26:7e:5a: d9:61 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 29:73:8C:17:65:A8:23:52:98:5D:93:E0:1C:0A:E9:1D:65:44:A4:EA X509v3 Authority Key Identifier: keyid:20:7F:78:49:5B:91:DD:93:3A:3C:60:FB:6F:5F:3A:01:B3:AE:B2:44 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/8774856f-7453-4d02-bc35-3482eb5646a2/0/207F78495B91DD933A3C60FB6F5F3A01B3AEB244.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 66:83:5f:cc:1e:8b:da:1e:53:5f:3d:b1:c9:81:79:e9:7f:7c: ba:46:35:c6:ad:f3:a7:6e:17:2a:25:73:c9:bd:9a:1e:7b:94: 8e:e4:2d:c1:7f:da:5f:43:64:ff:f5:db:ea:21:a6:6c:1e:b6: a0:df:30:3f:f5:37:14:f5:c1:2f:08:94:1f:a9:cc:e2:7d:31: af:d1:43:e4:79:61:89:0d:f3:15:61:86:fe:11:e9:c8:4c:e4: f8:f7:76:fa:7a:9b:9b:c1:66:08:76:bc:a3:b2:33:1c:a7:d5: c4:ef:e0:11:63:61:cb:96:ea:d9:a8:52:c2:56:8d:cc:95:7b: d7:3f:c2:14:24:d5:c8:0a:f8:9e:8a:dd:05:49:50:62:40:4c: fa:6d:f4:8e:4f:a1:7e:a2:95:da:2d:d6:8d:e9:5b:11:ca:e9: 91:d4:4b:2d:93:e8:84:98:6f:b5:e6:29:b0:e4:d1:ac:ec:ea: 7b:1d:ec:47:f7:c2:20:24:d6:97:94:cc:89:95:96:49:23:5f: cd:ed:34:93:dd:4a:ec:d7:08:83:12:ae:41:68:07:26:44:9c: 26:07:10:4f:49:53:fb:5f:27:95:c3:18:27:3a:6f:9c:e8:51: da:e5:3f:86:3a:39:51:ed:49:df:af:a8:84:f0:de:6c:f5:46: a9:2d:64:66 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUPPTMOi5pLiA2PHBbANi80Bemr9wwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFC M0FFQjI0NDAeFw0yNjA2MDIyMzA4NThaFw0yNjA2MDQwMjEwNThaMDMxMTAvBgNV BAMTKDI5NzM4QzE3NjVBODIzNTI5ODVEOTNFMDFDMEFFOTFENjU0NEE0RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCjf56rPqpYelSV8VVRvQ+H/+BF CSEmichCkSNEjbTsIi7rZza1Ot4eQniI8+4ZUsG1+mjUK1W48EDxPr5/3zAf0Ofc R0MtCZDKYVKZz5SN383WNYoroL1FX1Qm4yezfoBrtD+1hK5TrlnOwAvin1Dvxatp IWbRcyafxLDW1ynajQpukURaldBwq/2Ta2qsYP6dqx98VQT3BSqpj72afjbOEHTg omh2xAUTFkuHuyggy1TicTcMjMFXbjAv68zK0Kk2vXpS6UwGcRX5AlXISJ5f2glV 0Ft97KqDhMjkVwpdxn3r+cTtPB1GM970Og+vY7dvjxfSrhcWgC/FAiZ+WtlhAgMB AAGjggI8MIICODAdBgNVHQ4EFgQUKXOMF2WoI1KYXZPgHArpHWVEpOowHwYDVR0j BBgwFoAUIH94SVuR3ZM6PGD7b186AbOuskQwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v ODc3NDg1NmYtNzQ1My00ZDAyLWJjMzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1 QjkxREQ5MzNBM0M2MEZCNkY1RjNBMDFCM0FFQjI0NC5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS8yMDdGNzg0OTVCOTFERDkzM0EzQzYwRkI2RjVGM0EwMUIzQUVC MjQ0LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vODc3NDg1NmYtNzQ1My00ZDAyLWJj MzUtMzQ4MmViNTY0NmEyLzAvMjA3Rjc4NDk1QjkxREQ5MzNBM0M2MEZCNkY1RjNB MDFCM0FFQjI0NC5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAGaDX8wei9oeU189scmBeel/fLpGNcat86du Fyolc8m9mh57lI7kLcF/2l9DZP/12+ohpmwetqDfMD/1NxT1wS8IlB+pzOJ9Ma/R Q+R5YYkN8xVhhv4R6chM5Pj3dvp6m5vBZgh2vKOyMxyn1cTv4BFjYcuW6tmoUsJW jcyVe9c/whQk1cgK+J6K3QVJUGJATPpt9I5PoX6ildot1o3pWxHK6ZHUSy2T6ISY b7XmKbDk0azs6nsd7Ef3wiAk1peUzImVlkkjX83tNJPdSuzXCIMSrkFoByZEnCYH EE9JU/tfJ5XDGCc6b5zoUdrlP4Y6OVHtSd+vqITw3mz1RqktZGY= -----END CERTIFICATE-----Generated at Wed Jun 3 04:05:21 2026 by rpki-client